A10 AX Series User Manual

Deployment Guide
AX Series for SharePoint 2010
DG_ACC_062011.1

A10 AX Series Specifications

General

Brand	A10
Model	AX Series
Category	Switch
Language	English

Summary

1 INTRODUCTION

2 DEPLOYMENT GUIDE OVERVIEW

3 DEPLOYMENT GUIDE PREREQUISITES

4 AX DEPLOYMENT FOR SHAREPOINT 2010 SERVER ROLES

5 ACCESSING THE AX SERIES LOAD BALANCER

6 SHAREPOINT 2010 RECOMMENDED INSTALLATION PROCEDURES

7 ARCHITECTURE OVERVIEW

8 BASIC AX CONFIGURATION FOR SHAREPOINT

8.1 SERVER CONFIGURATION

Configure SharePoint web servers within the AX Series.

8.2 HEALTH MONITOR CONFIGURATION

Configure health checks for real servers and service ports.

8.3 SERVICE GROUP CONFIGURATION

Configure SharePoint web servers into a service group.

8.4 VIRTUAL SERVER CONFIGURATION

Configure the Virtual IP (VIP) with the AX Series.

8.5 SOURCE IP PERSISTENCE

Configure Source IP persistence for client traffic.

8.5.1 CREATE IP PERSISTENCE TEMPLATE

Create a template for Source IP Persistence.

8.5.2 APPLY IP PERSISTENCE TO THE VIP

Assign the Source IP Persistence template to the VIP.

8.6 IP SOURCE NAT

Configure IP Source NAT for one-arm deployment.

8.6.1 CREATE IP SOURCE NAT TEMPLATE

Create an IP Source NAT template.

8.6.2 APPLY IP SOURCE NAT TO THE VIP

Apply the IP Source NAT template to the VIP.

8.7 VALIDATE SERVICE

Validate the basic configuration is functioning correctly.

9 ADVANCED AX FEATURES FOR SHAREPOINT

9.1 PREPARING THE CONFIGURATION

Prepare configuration changes for advanced features.

9.1.1 IMPORT EXISTING SHAREPOINT WEBSERVER SSL CERT OR CREATE SELF-SIGNED CA FROM THE AX

Configure SSL certificates: import or generate self-signed CA.

9.1.2 CREATE ONE CLIENT AND ONE SERVER SSL TEMPLATE

Create client and server SSL templates.

9.1.3 ON THE VIRTUAL SERVER, CHANGE THE SERVICE TYPE OF THE VIRTUAL PORT FROM "TCP" TO "HTTPS" AND APPLY THE NEW CLIENT AND SERVER SSL TEMPLATE

Change virtual port to HTTPS and apply SSL templates.

9.2 SSL OFFLOAD

Offload SSL processing from web servers to the AX Series.

9.2.1 CHANGE THE PORT NUMBERS IN THE SERVICE GROUP

Change service group ports for SSL Offload.

9.2.2 ON THE VIRTUAL SERVER, REMOVE THE SERVER SSL TEMPLATE

Remove Server SSL template for SSL Offload.

9.2.3 VALIDATE THE DEPLOYMENT

Validate the SSL Offload deployment.

9.3 COMPRESSION

Condense HTTP objects for bandwidth optimization.

9.3.1 CREATE HTTP COMPRESSION TEMPLATE

Create an HTTP compression template.

9.3.2 APPLY HTTP COMPRESSION TEMPLATE TO VIP

Apply the HTTP compression template to the VIP.

9.3.3 VALIDATE THE DEPLOYMENT

Validate the HTTP compression deployment.

9.4 COOKIE PERSISTENCE

Enable cookie persistence for session data.

9.4.1 CREATE COOKIE PERSISTENCE TEMPLATE

Create a cookie persistence template.

9.4.2 APPLY COOKIE PERSISTENCE TEMPLATE TO VIP

Apply the cookie persistence template to the VIP.

9.4.3 VALIDATING THE DEPLOYMENT

Validate the cookie persistence deployment.

9.5 CONNECTION REUSE (TCP OFFLOAD)

Reduce TCP connection overhead by reusing connections.

9.5.1 CREATE CONNECTION REUSE TEMPLATE

Create a connection reuse template.

9.5.2 CREATE AN IP SOURCE NAT TEMPLATE

Create an IP Source NAT template.

9.5.3 APPLY CONNECTION REUSE AND SNAT TO VIP

Apply connection reuse and SNAT to the VIP.

9.5.4 VALIDATE THE DEPLOYMENT

Validate the connection reuse deployment.

9.6 RAM CACHING

Cache data to reduce overhead and increase capacity.

9.6.1 CREATE RAM CACHING TEMPLATE

Create a RAM caching template.

9.6.2 APPLY RAM CACHING TEMPLATE ON VIP

Apply the RAM caching template to the VIP.

9.6.3 VALIDATE THE DEPLOYMENT

Validate the RAM caching deployment.

9.7 SECURING SHAREPOINT VIA AFLEX

Redirect HTTP to HTTPS using aFleX scripts.

9.7.1 CREATE AFLEX SCRIPT

Create an aFleX script for redirection.

9.7.2 CONFIGURE VIP WITH HTTP/PORT 80

Configure VIP for HTTP/Port 80.

9.7.3 APPLY AFLEX SCRIPT TO VIP

Apply the aFleX script to the VIP.

9.7.4 VALIDATE AFLEX SERVICE

Validate the aFleX service.

10 SUMMARY AND CONCLUSION

11 APPENDIX

11.1 AX SERIES CLI SAMPLE CONFIGURATIONS

Sample command-line interface configurations for AX Series.